LiteLLM 1.107.0 Backdoored in PyPI Supply Chain Attack
October 22, 2026
Attackers slipped a credential stealer and remote access trojan into LiteLLM 1.107.0, a package with 23 million weekly downloads, before
Cybersecurity
LiteLLM 1.107.0 Backdoored in PyPI Supply Chain Attack
Attackers slipped a credential stealer and remote access trojan into LiteLLM 1.107.0, a package with 23 million weekly downloads, before PyPI quarantined it.
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
Microsoft ties the ConnectWise Cloud Backup compromise to Storm-0940, which used an AI pentest tool called ARTEX against more than 2,250 Microsoft 365 tenants.
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
PHP released emergency fixes for two CVSS 9.2 flaws after details leaked early, and researchers saw exploitation attempts before and during the patch release.
Signal RingRTC Flaw CVE-2026-113380 Can Keep Mic and Camera On
A CVSS 9.3 denial-of-service flaw in Signal's RingRTC library can leave a microphone and camera live after hangup. A fix shipped in version 2.72.0 in ...
Exposed Servers Reveal INC and Gentlemen Ransomware AI Operations
SOCRadar found seven exposed servers tied to INC and The Gentlemen ransomware affiliates, holding AI chat logs, encryptor builds, credentials and 62 victims.
WhiteArmour Claims Breach of Disney Staff Directory
A hacker group called WhiteArmour says it holds Disney's internal staff directory and posted a sample of nearly 2,800 records. Disney has not commented.
Chrome 156 Patches 353 Security Flaws, Six Rated Critical
Google's Chrome 156 fixes 353 vulnerabilities, including six critical and 61 high-severity flaws, mostly memory safety bugs. No exploitation is reported.
PHP Warns of Two Critical RCE Flaws as Embargoed Details Leak
PHP pre-announced emergency patches for two CVSS 9.2 remote code execution flaws after embargoed details leaked, raising fears of mass exploitation soon.
DHS Orders Federal Civilian Agencies to Remove DeepSeek Products
A DHS order under the FASCSA directs US federal civilian agencies to remove DeepSeek products and bars new purchases, citing data access risks tied to ...
Feds Suspect Ransom Negotiator Helped Run ShinyHunters Leak Site
US investigators reportedly suspect executives at two ransomware negotiation firms had close ties to ShinyHunters, and one helped run its extortion site.
Microsoft Ties ConnectWise Backup Attack to China-Aligned Storm-0940
October 22, 2026
Microsoft ties the ConnectWise Cloud Backup compromise to Storm-0940, which used an AI pentest tool called ARTEX against more than
PHP Ships Emergency Patches for PHP2Shell as Exploitation Begins
October 22, 2026
PHP released emergency fixes for two CVSS 9.2 flaws after details leaked early, and researchers saw exploitation attempts before and
Signal RingRTC Flaw CVE-2026-113380 Can Keep Mic and Camera On
October 22, 2026
A CVSS 9.3 denial-of-service flaw in Signal’s RingRTC library can leave a microphone and camera live after hangup. A fix
Exposed Servers Reveal INC and Gentlemen Ransomware AI Operations
October 22, 2026
SOCRadar found seven exposed servers tied to INC and The Gentlemen ransomware affiliates, holding AI chat logs, encryptor builds, credentials
WhiteArmour Claims Breach of Disney Staff Directory
October 22, 2026
A hacker group called WhiteArmour says it holds Disney’s internal staff directory and posted a sample of nearly 2,800 records.
Chrome 156 Patches 353 Security Flaws, Six Rated Critical
October 22, 2026
Google’s Chrome 156 fixes 353 vulnerabilities, including six critical and 61 high-severity flaws, mostly memory safety bugs. No exploitation is
PHP Warns of Two Critical RCE Flaws as Embargoed Details Leak
October 21, 2026
PHP pre-announced emergency patches for two CVSS 9.2 remote code execution flaws after embargoed details leaked, raising fears of mass
DHS Orders Federal Civilian Agencies to Remove DeepSeek Products
October 21, 2026
A DHS order under the FASCSA directs US federal civilian agencies to remove DeepSeek products and bars new purchases, citing
Feds Suspect Ransom Negotiator Helped Run ShinyHunters Leak Site
October 21, 2026
US investigators reportedly suspect executives at two ransomware negotiation firms had close ties to ShinyHunters, and one helped run its
Trending
Daily Briefing Newsletter
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.